139mm.com

[jmike]

I am also getting an Internet Explorer Trusted Sites
alert when I "immunize" with Spybot Search & Destroy. I
get a MSAS popup stating "An Internet Explorer trusted
site & 139mm.com has been denied permission to be
installed. This program is in the user's blocked trusted
Site list." This event occured on 4/28/2005 at 1:59 AM.

www.139mm.com is on my Restricted sites list as
*.www.139mm.com and is in registry at
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Internet Settings\ZoneMap\Domains\www.139mm.com and
HKEY_USERS\S-1-5-21-1409082233-152049171-725345543-1003
\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\www.139mm.com.

Why and what is MSAS finding?

 

[Gunilla]

Hi jmike.

As you maybe could read in the other posts it seems to have been fixed with
the latest update of Spybot S&D, so I wonder what version do you have? It
"might" be a false positive, as I understand it and nothing to worry about.
Follow this link to net-integration, this was the only info I got via
Google.
http://forums.net-integration.net/index.php?showtopic=29540&st=0&#entry141257

Gunilla

 

[Guest]

Gunilla,

I'm a little confused whether this issue is fixed or not,
and how was it fixed. I'm still getting the notification
when I run MSAS. I'm using Spybot S&D version 1.3.1TX
(with DSO Exploit fix) and (I believe) I have the most
recent updates, and received this response from MSAS
today, which means it might not be fixed yet, which is
why I posted. I also think I have the most recent updates
of MSAS.

With my (very limited) understanding of the issue, I
don't currently think it is a serious threat either, as I
think I am covered in other ways, but I thought others
should know that the problem might still be out there.
This is a software conflict between MSAS and Spybot S&D
regarding whether 139mm.com is safe or not (which it is
not), right? As I said, my understanding is limited.

And which direction we should look for the fix, to MSAS
or to Spybot S&D?

Thanks for responding.

 

[Gunilla]

Hello.

I am not an expert on this either but I will try to explain how I think it
is as there was not so much info. to find via Google. I know I have read it
somewhere but it is just typical when wanting to have a reference that it is
not easy to find.

You see that both Bill and I have Spybot S&D version 1.4 b2 which is as Bill
wrote a beta version. It was not until I updated the Spybot to this beta
version that MSAS stopped to report this 139mm.com site from being added to
my trusted site (wrong wording of course). I do not know about Bill's
settings in Spybot but I have in settings to also display available beta
versions and that is (I think) why I got the 1.4 b2 version which seems to
have cured the immunizing conflict with MSAS.

Looking in where MSAS reports it to be located one can just assume that it
is a false positive as those places in the registry relates to where such
programs as Spybot S&D is putting the sites to be blocked, from what I have
been taught.

Hope this helps.

Gunilla.

 

[jmike]

Gunilla,

Thanks again. I just updated MSAS to def. v5713, etc.,
1/28/05, 8:24:41 PM. The issue seems to have gone away.
At least I can no longer reproduce it. Spybot S&D no
longer leaves 1 item not immunized and MSAS no longer
pops up a notification about 139mm.com. Soooo, What Me
Worry? Life is good. Thanks again for responding. I
appreciate your help, and everyone's!

 

[Gunilla]

You are welcome! )

Gunilla

Gunilla,

Thanks again. I just updated MSAS to def. v5713, etc.,
1/28/05, 8:24:41 PM. The issue seems to have gone away.
At least I can no longer reproduce it. Spybot S&D no
longer leaves 1 item not immunized and MSAS no longer
pops up a notification about 139mm.com. Soooo, What Me
Worry? Life is good. Thanks again for responding. I
appreciate your help, and everyone's!